deco-core-architecture

Pass

Audited by Gen Agent Trust Hub on Mar 11, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [NO_CODE]: The skill consists exclusively of Markdown documentation files providing a technical reference for the deco-cx/deco repository. There are no executable scripts (.ts, .js, .sh), configuration files, or binaries that would trigger automated actions.
  • [SAFE]: The documentation provides a neutral overview of the framework's architecture, including the resolution engine, block types, and runtime request handling. No evidence of prompt injection, hardcoded credentials, or malicious behavior was found.
  • [SAFE]: References to external resources (e.g., vtex, cloudflare, hono, fresh) are well-known technology vendors or specific examples of commerce applications used within the framework's ecosystem and do not constitute a security risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 11, 2026, 11:22 PM